Static task
static1
Behavioral task
behavioral1
Sample
34e0af9f6e397de85ab02b4846a0ec372eedc0e32fb17ae85e3e4eef9722ebfe.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
34e0af9f6e397de85ab02b4846a0ec372eedc0e32fb17ae85e3e4eef9722ebfe.dll
Resource
win10v2004-20240508-en
General
-
Target
34e0af9f6e397de85ab02b4846a0ec372eedc0e32fb17ae85e3e4eef9722ebfe
-
Size
92KB
-
MD5
9aec79370c9412cf0cf15032531a1c74
-
SHA1
c3d7ccba9d356c2c056ce844320ec5ac0685d0ae
-
SHA256
34e0af9f6e397de85ab02b4846a0ec372eedc0e32fb17ae85e3e4eef9722ebfe
-
SHA512
0fbf458c96dee547c40e80fe3d01345196b9f0538c7f2707a05aa69d39927f42a9c389bd3516db3396ec101af7760785beb4f999003aa7884917eff2c91c240c
-
SSDEEP
768:lbExYvdVMR0sY4dx9KvZ7DmC65xW/krqS4UHaZ1etQtoMalzSLct44uPSlY7xE0p:uGvWkdj65xWMoU6/etQtt/elsH/Tmc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34e0af9f6e397de85ab02b4846a0ec372eedc0e32fb17ae85e3e4eef9722ebfe
Files
-
34e0af9f6e397de85ab02b4846a0ec372eedc0e32fb17ae85e3e4eef9722ebfe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ